Thank you, 4,634 backers
Our Kickstarter campaign closed with S$480,299 from 4,634 backers. Thank you for trusting us. Here is what happens next, and how you can help build immurok.
Read more →Blog
Engineering notes, product updates, and security deep-dives from the immurok team.
Making the local channel as trustworthy as the device
The device signs every touch. The last hop, from the app to sudo, used to trust a plain local socket. This September update closes that gap on macOS, Linux and Windows, and each platform needed a different approach.
Read more →A close call before mass production
30% of our pilot run failed the same way. We blamed solder, then a counterfeit crystal, and finally found two capacitors that should not have been there.
Read more →One fingerprint key, two computers
Most people who want a wireless fingerprint key have two computers. Bluetooth pairing is 1-to-1, so making one key serve both cleanly took some design. Here's how dual-host works, and why we built it this way.
Read more →One touch, three paths: how immurok authenticates on macOS
macOS has no single API you can plug a fingerprint into. immurok meets each authentication surface with the right mechanism — PAM, credential injection, or a GUI bridge — and keeps a hard security boundary around each. Here's the map, and an honest risk analysis.
Read more →How immurok verifies its own firmware: encryption, signatures, and OTA over BLE
A fingerprint key that accepts forged firmware is worthless, so the OTA pipeline is where immurok's security model either holds or collapses. This is how ours works: the .imfw package format, AES-CTR encryption, on-device verification, the migration from HMAC to ECDSA P-256 signatures, anti-rollback — and what it takes to run P-256 on a chip with 26KB of RAM and a 512-byte stack.
Read more →Eight PCB revisions for a tiny wireless fingerprint key
Notes from building immurok: a wrong MCU choice, a sensor swap, a tamper switch that only worked while powered, and a long fight to get standby current down to 50 uA.
Read more →Why desktop fingerprint authentication is still awkward on Mac and Linux
Touch ID is excellent when it's built into the machine or keyboard. Everywhere else — Mac mini, Mac Studio, clamshell MacBooks, external keyboards, Linux desktops — desktop biometrics are still awkward. immurok is a small wireless fingerprint key for those setups, and on Linux it goes through PAM, not a stored password.
Read more →The immurok security model
A fingerprint key is only as good as the trust it can prove. Here's how immurok keeps your biometrics on the device, authenticates every touch, and refuses to phone home — ECDH pairing, HMAC-signed events, and signed firmware, end to end.
Read more →A fingerprint gate for your AI coding agent
Claude Code, Cursor, Codex, Aider — they all want to run sudo, push to git, or read API keys on your behalf. Here's how immurok turns one fingerprint touch into the human in the loop.
Read more →Why we're building immurok
Millions of developers use desktop Macs and Linux machines without any biometric auth. We're building a tiny wireless fingerprint key to fix that.
Read more →